When Access Manager is initially enabled, the PAM service will have no permissions granted by default. We have enabled all accounts the ability to grant access rights before enabling the Access Manager. Once the appropriate permissions have been granted you can then enable the Access Manager.
IMPORTANT: Thorough testing should be performed in a test environment prior to enabling Access Manager on a production account.
For more information, please check Manage Access.